Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Gard5' = '%HOMEPATH%\Photog7\CLAUDELLT.vbs'
- claudellt.exe
- %HOMEPATH%\photog7\claudellt.exe
- %HOMEPATH%\photog7\claudellt.vbs
- 'ta###rket.co.uk':443
- 'ta###rket.co.uk':443
- DNS ASK ta###rket.co.uk
- 'localhost':59708
- 'localhost':59912
- '%HOMEPATH%\photog7\claudellt.exe'